基于信息流图的隐通道分析技术研究  

Using an information flow graph to identify and analyze covert channels

作　　者：崔宾阁 刘大昕 

机构地区：[1]哈尔滨工程大学计算机科学与技术学院,黑龙江哈尔滨150001

出　　处：《哈尔滨工程大学学报》2006年第5期742-747,共6页Journal of Harbin Engineering University

摘　　要：为了减轻隐通道分析人员的负担,提出了一种基于信息流图的隐通道识别和分析方法.信息流图简单、直观地表现了信息从发送者经过特定的属性集合传播到接收者的过程.介绍了信息流图的构造方法和潜在隐通道的搜索方法.为实现隐通道的自动分析,提出了操作序列分析的6条基本规则并引入了等价操作序列的概念.开发了一个隐通道自动分析工具.实验结果表明该工具大大减轻了隐通道分析人员的工作量,同时能够产生所有真实的隐通道应用场景.A technique is introduced for detecting covert channels using a graph structure called an information flow graph. The information flow graph can graphically illustrate the process through which information is relayed from the sender to the receiver via particular resource attributes. Algorithms for automating the construction of information flow graphs and potential covert channel operation sequences are presented. Six rules that a user can use to perform the analysis of the operation sequences were identified. Moreover, the notion of equivalent operation sequences was proposed to reduce the number of operation sequences. Based on these rules, a tool was developed to analyze the operation sequences automatically. Experiment results show this method can decrease the workloads for covert channel analysts remarkably, and can produce all true covert communication scenarios.

关 键 词：安全操作系统 隐通道分析 信息流 信息流图法 

分 类 号：TP311.13[自动化与计算机技术—计算机软件与理论]